Setting Up SiteMinder
- Set up SiteMinder IDP and SP Entities and Federation.For details, refer to the CA documentation and help links below:
- Set the Authentication Request Binding to HTTP-REDIRECT and the SSO Binding to HTTP-POST:
- Pass the following attributes to Lookout.All attributes use Retrieval Method: SSO and Format: Basic.
Assertion Attribute Type Value Description ent
Static This is a static value provided by Lookout. It is the GUID generated when creating the enterprise tenant, for example: 7e1a2620-b8ab-4fd1-a8c7-4a2b980ec23a
givenname
User Attribute givenname
The user's first name. mail
User Attribute mail
The user's email. memberof
User Attribute memberOf
The user's group membership. sn
User Attribute sn
The user's last name. upn
User Attribute upn
AD User Principal name. - Activate the Partnership and generate the SP Metadata file that Lookout uses to setup the IDP.